Palo Alto Expedition Cross-Site Scripting

Multiple cross-site scripting XSS vulnerability exists in Palo ALto Expedition Migration Tool in versions less than or equal to 1.1.8 due to improper validation of user-supplied input before returning it to users. - An authenticated remote attacker may be able to inject arbitrary JavaScript or HT...

CVE-2019-1570

CVE-2019-1570 affects the Palo Alto Expedition Migration Tool (versions 1.1.8 and earlier). The issue arises from improper validation of user-supplied input, allowing an authenticated attacker to run arbitrary JavaScript or HTML in the LDAP server settings. Exploitation would require authenticati...